GCIH · Question #251
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?
The correct answer is D. Buffer overflow attack. Buffer overflow attacks occur when a program writes more data to a buffer than it can hold due to missing or inadequate bounds checking - a direct result of poor programming practices.
Question
Which of the following types of attacks is the result of vulnerabilities in a program due to poor programming techniques?
Options
- AEvasion attack
- BDenial-of-Service (DoS) attack
- CPing of death attack
- DBuffer overflow attack
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- D93% (27)
Why each option
Buffer overflow attacks occur when a program writes more data to a buffer than it can hold due to missing or inadequate bounds checking - a direct result of poor programming practices.
An evasion attack targets the detection mechanisms of security tools such as IDS/IPS to avoid triggering alerts and is not caused by programming deficiencies in an application.
A Denial-of-Service attack overwhelms a resource to make it unavailable; while poor code can make a system more susceptible, DoS is not specifically the result of poor programming techniques as a category.
A Ping of Death attack sends malformed or oversized ICMP packets to crash a target system and is a specific protocol-level exploit, not a consequence of general poor programming in an application.
A buffer overflow attack exploits a programming flaw where the developer failed to validate input length before copying data into a fixed-size buffer, allowing attackers to overwrite adjacent memory, corrupt stack frames, and potentially execute arbitrary code.
Concept tested: Buffer overflow vulnerability root cause
Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow
Topics
Community Discussion
No community discussion yet for this question.